® Publication numben 0 258 701 

A2 



® EUROPEAN PATENT APPLICATION 



€) 


Application number: 87111723.0 


® int Cl.<: H04K 1/02 , H04L 9/00 




Date of fiiing: 13.08.87 






Prtnrftv- fl^HQ fKR 11^ Qfl^'V^n 

1 llUllly- U0*U9»00 UO ^vlOOOtr 










DEt9 of publication of appltCBtion: 


Schaumbura. Illinois 60196^US) 




OQ 0^8S Bulletin 8&/10 








Im/Antnr* Rrinht Mir^hskol W 
liIVoMlUl> Diiyii^ IVlll^ilatSl 










AT BP CH DP PS PR IT 11 LU ML ^P 














810 S. Pheasant Walic Drive 






Hoffmann Estates Illinois 60195(US) 












^79n AlriAr RrivA 












InwAnfnr* draw Mi^l^AtlA lUI 
IllVoniOl* Dfayf mldlcliS Ma 






1104 Quanset Court 






Schaumbura Illinois 60194/US^ 






Inventor. Hennen, Harry A. 






4622 Dean Street 






Woodstocic Illinois 600d8(US) 






Inventor: Weiss, David L 






520 Daiton Lane 






Roselle Illinois 60172(US) 






® Representative: Hudson, Peter David et at 






Motorola Ltd. Patent and Licensing 






Operations - Europe Jays Close Vlabies 






industrial Estate 






Basingstolce Hampshire RQ22 4PD{QB) 



J 



Europaisches Patentamt 
® O^lll European Patent Office 

Office europeen des brevets 



@ Secure communication system. 

^(§> Disclosed is a synchronous secure communica- 
^tion system (Figure 1) wherein an information signal 
^is encrypted in an encryption means (208). The 
O encrypted signal is compressed (210) to allow the 
reinsertion of a pseudo-random synchronization signal 
0Q(212), and the combined signals are transmitted 
10(220). At the receiver, the pseudo-random synchro- 
^nization signal is extracted (232) and used to syn- 
Ochronize the receiver to the incoming data stream 
thereby improving receiver sensitivity and range. 
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SECURE COMMUNICATION SYSTEM 



Technical Held 

This invention relates generally to two-way 
communication systems and more particularly to 
secure two-way communication systems and is 
particularly directed toward providing a two-way 
secure voice communication system. 



Background Art 

Secure communication systems are known. 
The goal of such systems is to render a message 
unintelligible so as to prevent unauthorized recep- 
tion. Typically, a message, such as a voice mes- 
sage, is digitized and processed through an en- 
cryption device to produce a signal that Is random 
or pseudo-random in nature, thus appearing noise- 
like to the unauthorized receiver. The particular 
encryption algorithm used by the encryption device 
may be a proprietary afgorithm, or may be based 
on a standard such as the Data Encryption Stan- 
dard (DES) promulgated by the National Bureau of 
Standards (NBS), of the United States Government 

Generally, it is known to operate a selected 
encryption device in the cipher feedback (CFB) 
mode, wherein the cipher text output signal is 
added (modulo two) with the plain text input signal; 
the result being feedback into the encryption de- 
vice. As used herein, cipher text means the en- 
crypted unintelligible signal transmitted from, or 
received by, an encryption device operating within 
a secure communication system. Further, as used 
herein, plain text means the unerxa^pted (or 
"clear") signal transmitted from, or received by. an 
encryption device operating within a secure com- 
munication system. Those skilled in the art will 
appreciate that the wide utilization of the CFB 
mode of operation was due chiefly to the self- 
synchronizing signal (as related to encryption syn- 
chronization) that is produced. In fact, the NBS has 
suggested that secure communication equipment 
suppliers employing the D.E.S. design their sys- 
tems to operate in the CFB mode. 

However, a secure communication system hav- 
ing transceiving devices that operate in the CFB 
mode suffers a serious detriment in that the tran- 
sceiving devices have a reduced operational range. 
The range reduction is caused by error, multiplica- 
tion in the receiver, which manifests itself as deg- 
raded receiver sensitivity. The error multiplication 
is fundamental to the CFB concept since an erro- 
neously received bit is applied to the encryption 
algorithm input until the error finally "clears" or is 



shifted out of the algorithm input register. Thus, for 
D.E.S. with an input register of 64 bits, a single 
erroneously received bit produces sixty-four errors 
in the plain text output stream. Receiver sensitivity 
5 reduction of 4-6 dB is typical, and, depending on »^ 
the transmitter power, may result in a range reduc- 
tion measured in miles. Therefore, a need exists for 
a secure communication system to overcome the * 
range reduction problem of the prior art. 

70 

Summary of the Invention 

Accordingly, it is an object of the present in- 
75 vention to provide an improved secure communica- 
tion system. 

It is a furtfier object of the present invention to 
provide a synchronous secure communication sys- 
tem having extended range. 
20 It is another object of the present invention to 

provide a synchronous transceiving device capable 
of operating in the secure communication system 
of the present Invention. 

It is yet a further object of the present invention 
25 to provide a synchronous receive-only device ca- 
pable of operating in the secure communication 
system of the present invention. 

It is still another object of the present invention 
to provide a means for especially adapting prior 
30 CFB devices thereby enabling them operating with- 
in the extended range secure communication sys- 
tem of the present invention. 

It is yet another object of the present invention 
to provide a method for compressing a digital sig- 
35 nal to insert a synchronization signal. 

It is still a further object of the present inven- 
tion to provide an improved synchronization detec- 
tor for use in a secure communication system. 
It is yet a further object of the present invention 
40 to provide a method for expanding a compressed 
digital signal with bit prediction. 

It is the final object of tiie present invention to 
provide a synchronous secure communication sys- ^ 
tem having extended range. 
45 It is the ultimate object of the present invention 

to provide an improved secure communication sys- 
tem. 

Briefly, according to the invention, a synchro- 
nous s cure communication system is provided 
50 wherein an information signal is encrypted in an 
encryption means. The encrypted signal is com- 
pressed to allow the insertion of a synchronization 
signal, and the combined signals are transmitted. 
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At the receiver, the synchronization signal is ex- 
tracted and used to syndirohiz the receiver to the 
incoming data stream thereby improving receiver 
sensitivity and range. 

Brief Description of the Drawings 

The features of the present invention which are 
believed to be novel are set fourth vwth particularity 
in the appended claims. The invention, together^ 
with further objects and advantages thereof, may 
be understood by reference to the following de- 
scription, taken in conjunction with the accompany- 
ing drawings, and the several figures of which like 
reference numerals identify like elements, and in 
which: 

Figures 1a-b are a block diagrams of the 
secure communication system of the present in- 
vention; 

Rgure 2 is a block diagram of a transceiving 
device capable of operating in the system of Rgure 
1; 

Rgure 3 is an illustration of the preferred 
signalling format of the present invention; 

Rgure 4 is a block diagram illustrating the 
preferred mode of operation of the encryptor of 
Figure 2; 

Rgure 5 is a block diagram illustrating how a 
CFB encryption device may be especially adapted 
to operate in the system of Rgure 1 ; 

Rgure 6 is a block diagram of the compres- 
sor of Rgure 2; 

Rgure 7 is a chart illustrating the operation 
of the compressor of Rgure 6; 

Figure 8 is a block diagram of the sequence 
generator of Rgure 2; 

Rgure 9 is a block diagram of the synchro- 
nization detector of Rgure 2; 

Rgure 10 is a block diagram of the expander 
of Rgure 2; 

Rgure 11 is a chart illustrating the operation 
of the expander of Rgure 10; 

Rgure 12 is a block diagram illustrating the 
preferred mode of operation of the decryptor of 
Rgure 2; 

Rgure 13 is a block diagram illustrating how 
a CFB decryption device may be especially adapt- 
ed to operate to operate in the system of Rgure 1 . 

Detailed Description of the Preferred Embodiment 

Referring now to the drawings and in particular 
to Figure la. there is shown a block diagram of the 
secure communication system 100 of the present 
invention. Basically, the secure comrnunicalion sys- 
tem 100 is comprised, of at least one base station 



^ 102. and a plurality of remote units 104 and 106. In 
Rgure lb. a console 110 communicates with the 
remote units via a r peater *108. Preferably, the 
repeater 108 operates to r peat an encrypted mes- 

5 sage without decrypting it kx:al]y. In this way. end* 
to-end security of th message is maintained. 
Moreover, "transparent" repeaters that do not lo- 
cally decrypt the message do not require the 
"encryption key", and tiius, provide a system ad- 

70 vantage in that a system operator need not com- 
mute to each repeater side to periodically change 
the encryption key to maintain system security. 
The remote units communicating on this system 
may include mobile units 104, or portable units 

T5 106. Typically, mobile units are understood to be 
transceivers designed to operate in a vehicle. A 
portable unit is typically understood to be a tran- 
sceiving or receive-only device designed primarily 
to be carried on or about the person. Base stations. 

20 and repeaters are usually permanent or semi-per- 
manent installations in buildings or other such fixed 
locations. As used herein, any of these devices that 
are capable of encrypting and decrypting an in- 
formation signal to communicate within the secure 

25 communication system 100 are collectively referred 
to as transceivir>g devices. 

Referring now to Rgure 2. a transceiving de- 
vice 200 capable of operating in the secure com- 
munication system 100 of Rgure 1 Is shown. To 

30 transmit a message, an information signal, such as 
a voice signal, is provided by the microphone 202 
to the analog-to-digital (A/0) converter 204. The 
A/D 204 may be any suitable device which pro- 
vides a digital representation of the voice signal. 

35 and preferably is a Continuously Variable Slope 
Delta-Modulator (CVSD). Those skilled in the art 
can appreciate that human speech contains a large 
amount of redundant information. Speech produc- 
tion may be modeled as an excitation signal (i.e.. 

40 air from the lungs) driving a filter (the vocal tract), 
which possesses a certain resonant structure. The 
spoken sound changes with time ^nce the filter 
varies with time. The excitation is noise-like for 
unvoiced sounds (i.e., consonants) and appears as 

45 a periodic excitation for voiced sounds (for exam- 
ple vowels). The continuous noise-like consonants, 
combined with the periodic excitation of vowels, 
produces a voice signal having a highly redundant 
information content. 

50 Referring still to Rgure 2, the speech signal is 

digitized In the A/D 204. which preserves the re- 
dundancy in the speech signal. It is especially 
convenient if the technique used to digitize an 
inherently redundant voice signal produces redun- 

55 dant digital patterns. Such techniques are known in 
the art and preferably a CVSD device is used since 
they are known to produce a digital waveform 
having several consecutive "ones" and "zeros". 
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Alternatively, a data source 206 may provide the 
information signal, which may be any data signal 
(such as computer data) provided that the data 
signal contains, or may be adapted to contain, 
redundant information. One method known in the s 
art for adapting a data signal to contain redundant 
information is interpolation sampling wherein a data 
bit is held in a sample and hold device and its 
logical state clocked out for a predetermined num- 
ber of times. In this way, each data bit may be to 
replicated within the data stream thereby providing 
redundancy. At the receiver, the redundant bits are 
simply discarded prior to presenting the informa- 
tion signal to the operator. 

The digital information (plain text) signal is ap- is 
plied to an encryptor 208, which encrypts the in- 
formation signal producing a random or pseudo- 
random encrypted signal that preferably resembles 
a noise signal. Preferably, the encryptor 208 Is 
coupled to the sequence generator 212 such that it 20 
operates in the Counter Addressing (CA), or finear 
recursion, mode as will be hereinafter fully de- 
scribed. Those skilled in the art will appreciate that 
any digital encryption device may be used as the 
encryptor 208, including CFB devices so long as 25 
they are especially adapted for use with the 
present invention as will also hereinafter be fully 
described. The encrypted (cipher text) signals is - 
provided to the compressor 210. which discards 
selected bits or small groups of bits of the encryp- so 
ted signal and compresses the remaining bits to 
make room for a synchronization signal supplied 
by a sequence generator 212, Preferably, the se- 
quence generator 212 is capable of providing a 
plurality of synchronization signals, each of which 35 
is random or pseudo-random in nature since they 
are interleaved with the encrypted signal. The plu- 
rality of synchronization signals may be used as a 
group identification (ID codes) to divide, for exam- 
ple. Police and Rre departments, or other such 40 
tactical groups operating on the same system. 
Moreover a "dummy" synchronization signal may 
be used by the secure communication system of 
the present invention to continuously transmit in- 
formation, such as an electronically stored copy of 45 
a textbook or encyclopedia, so that there is con- 
tinuous "traffic" on the system. In this way, the 
unauthorized receiver will not be able to detect the 
information traffic increase that typically occurs 
during the handling of an emergency. Of course, to so 
continuously transmit information and still receive a 
message, the antenna switch 224 must be replaced 
by a duplexer as known in the art. One of the 
plurality of synchronization sequences may be se- 
lected by the controller 216 to be combined with 55 
any particular message. At the conclusion of the 
information message, the dummy sequence may 
be re-selected to maintain continuous transmission. 



Altemativeiy, a predetermined digital word may be . 
used as the synchronization signal, however, the 
security of the communication system may be 
comprised since the unauthorized receiver may- 
easily determine which portion of the signal is 
encrypted information and which is merely syn- 
chronization information. 

The synchronization signail is interleaved with 
the compressed encrypted signal via the switch 
214. The switch 214 is controlled by a controller 
216, which may be a microprocessor or suitable 
equivalent. The controller 214 is programmed to 
periodically and systematically operate the switch 
214 such that the synchronization signal is properiy 
inserted into the space provided by the compres- 
sor 210. In addition, the controller adds frame data 
information 213 to the sequence so that the com- 
pressor and expander can be properiy synchro- 
nized- Preferably, the controller 216 is programmed 
with standard operating (default) parameters which 
determine, for example, the selection of the syn- 
chronization sequence and the interleave rate of 
the synchronization signal into the compressed en- 
crypted signal. These default parameters may be 
optionally over-riden by user specified parameters 
provided by a keypad 218 or other such data entry 
device. Additionally, tiie keypad 218 may be used 
to input the encryption key that will be used by the 
encryptor 210 and the decryptor 238. Aitemately, 
the positions of the encryptor 208 and the time 
compressor 210 may be interchanged. In this al- 
ternate embodiment the digital information signal 
is first compressed and then encrypted prior to 
combination with the synchronization signal. How- 
ever, the prefenred embodiment is to first encrypt 
and then compress since this allows flexible re- 
formatting of the synchronization signal interieaves 
rate (such as by the operator) witiiout having to de- 
crypt the signal and re-compress to provide a 
different synchronization sequence or fonmat 

Still referring to Rgure 2, the combined digital 
signal is routed to a transmitter 220. The transmit- 
ter 220 may be any suitable transmitter, and the 
description of any particular transmitter is not pre- 
requisite to the full understanding the present in- 
vention. To transmit the message, the transmitter is 
temporarily coupled to the antenna 222 via the 
antenna switch 224. The antenna switch 224 is 
controlled by the controller 216 via the connection 
226. Typically, the controller 216 operates the an- 
tenna switch 224 in response to an operator pro- 
vided signal such as a push-to-talk (PTT) signal as 
is well known in the art. Normally, the transceiving 
device 200 operates in the receive mode with the 
antenna 222 coupled to a receiver 228 via the 
antenna switch 224. As previously mentioned in 
connection with the transmitter 220, any suitable 
receiver may be used in the transceiving device 
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200 of the present invention and the description of 
any particular receiver is not prerequisite to the full 
understanding the present Invention. The receiv r 
228 provides the received signal to an optional 
error corrector 230. Those skilled in the art will 
appreciate that the received digital signal may have 
erroneous bits do to signal fading or other such 
adverse signal conditions. 'Accordingly, some re- 
ceiver designers prefer to employ error correction 
at the receiver to improve the receiver's perfor- 
mance. Proper reception of the synchronization 
signal is particularly important since no information 
will be delivered to an operator until the receiver is 
"in sync". Thus, the present Invention contem- 
plates the optional use of an error corrector 230. If 
error correction is desired, the preferred embodi- 
ment of its incorporation is fully disclosed in co- 
pending patent application entitled Linear Feedback 
Sequence Retention With Enror Correction, Attor- 
ney Docket No. CM-00321H. filed on an even date 
herewith and hereby fully incorporated by refer- 
ence thereto as if fully set fourth herein. Also, a 
preferred method of error correcting a pseudo- 
random synchronization sequence is described in 
co-pending application serial number 719,385. filed 
April Z, 1985. and assigned to the same assignee 
as the present invention. 

The received sequence is next applied to a 
synchronization detector 232 and an expander 234. 
The synchronization detector 232 locates the syn- 
chronization signal in the received signal and pro- 
vides a synchronization detect signal 236 if syn- 
chronization is achieved. Additionally, the synchro- 
nization detector provides framing information to 
the expander 234 so that the encrypted signal may 
be expanded back to its original form. As pre- 
viously mentioned, the compressor periodically re- 
moved a bit or small group of bits so that the 
signal could be compressed. For proper reception, 
the synchronized signal must be extracted and the 
removed bits replaced in their proper position. This 
is accomplished in the expander 234 by predicting 
the removed bit from the information gathered from 
the surrounding bits, which contain information of 
the logical state of the removed bit due to the 
redundant nature of the information signal. The 
expanded signal is received by a decryption device 
238, which may be any suitable device capable of 
recovering the Information signal from whatever 
encryption device 208 is used. Of course, if the 
encryptor 208 and the compressor 210 were re- 
versed, the expander 234 and the decryptor 238 
would also be reversed. The output of the decryp- 
tor 238 is the original information signal (plain text). 
If the information was data, the information may be 
displayed to the operator via any suitable display 
device 240, (f the information signal was a voice 
signal, the digitized representation must be first 



converted back to an analog signal in a digital-to- 
analog {Of A) converter 242. The now analog signal 
may be amplified in an audio amplifier 246 and 
provided to the operator via a speaker 248. In this 
5 way, messages may be transmitted and received 
using the transcelving device 200 of the present 
invention." 

From the foregoing, It will be readily apparent 
to those of ordinary skill in the art that a recetve- 

10 only device may be readily implemented using 
only the receive portion of Figure 2, taken In con- 
junction with the detailed description above. 
Receive-only devices capable of operating in the 
secure communication system 100 of the present 

IS invention include, but are not limited to. data dis- 
play pagers or tenminals (using the data display 
240), tone or tone-and-voice pagers (using the D/A 
242. the audio amplifier 246 and the speaker 248) 
and. without the compress/expand and encryption, 

20 as a data detector in base equipment for data 
regeneration. The receive-only devices may be ar- 
ranged in groups by judicious selection of operable 
synchronization sequences as described 
hereinabove in connection with the transceiving de- 

25 vices. 

Referring now to Figure 3, the preferred signal- 
ling format 300 is shown, initially, a suitable pre- 
amble portion 302 is transmitted so that the re- 
ceiver may acquire bit and sequence synchronlza- 

30 tion. Bit synchronization may be done by any of 
the many techniques known in the art. The length 
of the preamble is not critical, however, 3027 bits is 
preferred. The preamble is a portion of the syn- 
chronization sequence. Next, the initial frame mark 

35 data 308 for the expander 208 is sent in interval 
304. Preferably this is composed of a continuation 
of the synchronization sequence 306 (6 bits), and 
the continued synchronization sequence exclusive 
ORed with a 250 bit sequence generated by an 

40 eight stage maximal length Rnear feedback shift 
register sequence generator (308). The use of the 
250 bit sequence assures an accurate initial frame 
mark at the receiver. The 256 bit length of interval 
304 is conveniently chosen to be compatible with 

45 succeeding synchronization and frame mark inter- 
vals (312). This length may be user selected as 
previously mentioned. Following the synchroniza- 
tion block 304. a portion of the information signal 
(now encrypted and compressed) is transmitted in 

50 block 310. Preferably, 5888 encrypted information 
bits are transmitted in the information portion 310, 
which together with the synchronization block 304, 
form a fi-ame having a length of 6144 bits. Option- 
ally, as previously mentioned, botii the information 

55 portion and the frame length may be user selected. 
After the information block 310. and interleaved 
throughout the remainder of the message, is the 
synchronization and frame mark 312. Preferably 
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312 is composed of a portion of the synchroniza- 
tion sequence 314 (245 bits), and the continued 
synchronization sequence exclusively ORed with 
an eleven bit frame marker pattern 316. Block 312 
allows synchronization and frame marking to occur 
in the event that blocks 302 and 304 are not 
received. It also allows the continued detection of 
the synchronization to be verified. Preferably, the 
format 300 concludes' with an end-of-message 
(EOM) portion 318, which preferably is used to 
rapidly squelch the receiver so that the operator 
does not hear a noise burst 

Referring now to Figure 4, the preferred em- 
bodiment of the encryptor 208 is shown. Preferably 
the encryptor 208 operates in the Counter address- 
ing (CA) mode. As used herein, counter addressing 
means that the device implementing the selection 
encryption algorithm is fed a pseudo-random se- 
quence to generate the key stream, which is used 
to encrypt the plain text message. In this way the 
encryption device is "addressed" by the pseudo- 
random sequence. Preferably, the pseudo-random 
sequence is provided by a maximal length linear 
feedback shift register (LFSR). The sequence pro- 
vided by the LFSR is selected to be such that by 
knowing a small portion of the sequence, and the 
rules by which it was created, the entire sequence 
may be replicated at the receivers. Several such 
sequences are known in the art and the selection 
of any particular one is not essential to understand- 
ing the present information. 

Referring still to Figure 4. the pseudo-random 
sequence is provided by the sequence generator 
212 (see Rgure 2) and receive by a shift register 
400. Preferably, the shift register 400 is 64 bits in 
length, although other lengths may be used. The 
shift register 400 parallel loads its entire length as 
an address to the encryption device 402, which 
operates to implement any known or proprietary 
algorithm. The output of the encryption device 402 
information is the key stream 404, which is added 
(modulo two) to the (plain text) signal in the adder 
406. The output of the adder 406 is the cipher text 
stream, which is applied to the compressor 210 
(see Rgure 2). 

Referring now to Rgure 5, a block diagram 
illustrating an especially adapted CFB device is 
shown. A CFB device 500 in the receive mode is 
chiefly comprised of a shift register 502, an en- 
cryption device 504. and a modulo two adder 506. 
Typically, a differential decoder 512 is employed to 
avoid having to detect and compensate for phase 
inversions of the digital stream at the receiver. As 
is readily apparent, the differentially decoded input 
signal (CTI) is fed to the encryption algorithm 604. 
which produces a key stream 508. The key stream 
508 is added to the differentially decoded input 
signal (CTI) in the adder 506. which provides the 



decrypted output signal (PTO). The well known* 
error multiplicatiOD prqblem associated with CFB 
devices is readily apparent. Assume a single bit is 
erroneously placed in the shift register 502. Thi^ 

5 error will be applied the encryption algorithm 504 N 
times, where N is the length of the shift register. 
Thus, the error is multiplied by the length of the 
shift register. 

Historically, providers of secure communication 

70 equipment development proprietary encryption al- 
gorithms for use with their equipment. This resulted 
In a proliferation of encryptors each shielded in 
secrecy to maintain the security of the communica- 
tion system. Those of ordinary skill in the art will 

75 understand that in both Rgures 4 and 5, the actual 
encryption device may be the same, however, their 
modes of operation are entirely different. The en- 
cryption device is typically realized on a small 
hybrid de>^ce or incorporated into an integrated 

20 circuit (IC). Such implementation practice protects 
the security of the system by making it difficult to 
analyze the operation of the encryptor. However, 
the encryptor sealed within the IC or hybrid de\nce 
is forever constrained to operate only a selected 

25 mode. The present invention contemplates that it 
may be inconvenient to re-design encryptors to 
operate in the preferred CA mode of operation . 
Additionally, the present invention seeks to avoid a 
further proliferation of new encryptors for use in the 

30 secure communication system 100 of the present 
invention. Thus, the present invention contemplates 
especially adapting CFB devices for use with the 
present secure communication system. 

Still referring to Rgure 5. the LFSR sequence 

35 from the sequence generator 212 is operated upon 
by a differential encoder 510. The purpose of the 
differential encoder 510 is to counter the effect of 
the differential encoder 512. The overall result is 
. that differential decoder 512 is effectively removed 

40 from the CFB device and reduces the differential 
encoder and decoder (510 and 512) to mere digital 
delay elements. Of course, tf a particular CFB 
device 500 did not employ a differential decoder 
512. the differential encoder 510 would not be 

45 required. This delayed sequence is provided to the 
shift register 502. The sequence is applied in par- 
allel to the encryption algorithm, which effectively 
"addresses" the device as seen in Rgure 4. How- 
ever, the key stream 508 is added to tiie sequence 

50 in the adder 506 and not the plain text message as 
required. Accordingly, the present invention sub- 
tracts out the appropriately delayed (delay 514) 
sequence (to compensate for the differential de- 
coder and encoder delay) from the key stream in 

55 the subtracter 516. Thus, the key stream 508' is 
added to the plain text signal in the adder 518. 
which provides the cipher text output to the com- 
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pressor of Figure 2. In this way, an existing CFB 
device 500 operated in the receive mode may be 
adapted for use in the secure communication sys- 
tem 100 of the present invention. 

Referring now to Figure 6, there is shown the 
digital compressor 210 of Figure 2. The compres- 
sor 210 is comprised chiefly of an interleave coun- 
ter 602. a write counter 604, a read counter 606 
and a random access memory (RAM) 608, The 
length of the Interleave counter 602 is defined as 
being the interleave count (N). The write counter 
604. the read counter 606 and the RAM 608 are all 
of a common length referred to as the address 
counter (S). and is equal to the number of data or 
synchronization bits that will be inserted into the 
digital information stream. In the preferred embodi- 
ment, the interleave count (N) equals 24 and the 
address count (S) equals 256. although the com- 
pressor 210 of the present invention is not con- 
strained to these values and any other values may 
be selected without departing from the teachings of 
the present invention. The interleave counter 602. 
the write counter 604, and the read counter 606 
may be any suitable counter and may be imple- 
mented in integrated circuit (IC) fonn or their func- 
tion may be incorporated as an internal register of 
a microprocessor or the like. Similariy, the RAM 
608 can be any suitable memory means having a 
size (S) that is equal to the amount of data to be 
inserted and transmitted. As is known, certain 
microprocessors have an internal RAM area and 
provided the RAM is of sufficient size, all major 
components of the compressor 210 may reside 
within a single microprocessor chip. 

Operationally, prior to transmission, all counters 
are preferably reset so that the memory addresses 
start at zero. The information signal to be transmit- 
ted (be it data or digitized voice) is presented to 
the input port 610 of the I^M.608r and is synchro- 
nized to a clock 612. The interleave counter 602 
and the write counter 604 begin "up-counting" in 
synchronization to the clock signal 612. That is. for 
each clock pulse, the count of the pulses is incre- 
mented by a predetermined value (one in the pre- 
ferred embodiment). The read counter 606 also 
increments from the clock signal 612. Both the 
read counter 606 and the write counter 604 reset 
when they reach the maximum count of S. The 
write counter 604 and the read counter 606 provide 
the addresses for the RAM 608. As each bit of 
information Is clocked into the RAM 608. a write 
address is received from the write counter 604 via 
the switch 620. The switch 620 is controlled by the 
clock 612. which is also coupled to the RAM's 
read-write (R/W) control port 609 through the in- 
verted, the inverter 614 would not be required. 



Thus, when the clock signal changes state, the 
RAM 608 switches to the read mode, and a read 
address is provided from the read counter via the 
switch 620. 

5 As previously mentioned, the interieave counter 

602 has length N. Accordingly every N clock cy- 
cles a pulse will be presented at the interieave 
counter output 616. This pulse is routed to a reset 
port 618 of the interieave counter 602, which resets 

70 the interieave counter to a logical zero state to 
resume up-counting again. The output port 616 of 
the interieave counter 602 also controls the switch 
622. \A/hen the interieave counter 602 asserts its 
output pulse, tiie Ntii clock pulse is prevented from 

75 reaching the write counter 604 due to the opened 
switch 622. This keeps tiie write address the same 
for two consecutive clocks causing the previous bit 
to be written over before it is read. The effect is 
that every Nth bit of the infonmation signal pre- 

20 sented at tiie RAM input port 610 is discarded. For 
N consecutive c\ock cycles the read and write 
addresses are the same. In the compressor, it 
doesn't matter whether the memory 608 is written 
to or read from first, however, in the preferred 

25 embodiment of the present invention, the memory 
is first written to. This is done by having counters 
602, 604 and 606 inaement on the rising edge of 
tiie clock arKJ having the switch 620 select the 
write counter with the memory in the write mode 

30 when the clock is a logical one. Other combinations 
are possible. The first S bits to be read out of the 
memory 608 are replaced by the synchronization 
information. The synchronization sequence may be 
inserted by the switch 214 from the sequence 

35 generator 212. Following this the information signal 
travels through the RAM 608 on a first-trnfirst-out 
(FIFO) basis until all the digital information is sent 
In this way the synchronization data may be trans- 
mitted after (N-I)XS bits (5.888 bits in tfie prefen-ed 

40 embodiment). 

Referring now to Rgure 7. in conjunction with 
Figure 6, an illustration of the compressor 210 of 
Rgure 2 is shown for the simple case of S = 9 
and N = 6. The RAM 608 addresses are arranged 

4S from left to right across the top. The clock cycles 
from the clock 612 are listed sequentially along the 
left margin. The output 624 of the RAM 608 is 
illustrated down the right hand margin, since S = 
9. the addressable RAM space is 0-8 inclusive. For 

so illustration purposes, the clock has been selected 
to start arbitrarily at zero and may increase without 
bound. For each clock cycle a read address has 
been illustrated by "R" and a write address illus- 
trated with th "W". For those cases where the 

55 read and write addresses are identical for a given 
clock cycle, a "WR" is listed in the corresponding 
column. This notation indicates that the memory 
608 is first written to. As previously mentioned, the 
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counters are preferably reset to zero befor the 
process begins. Accordingly, the output of the 
* RAM 608 for bits 0-8 of the RAM 608 are not used 
so the synchronization signal Is transmitted instead. 
The compressed, digital waveform is read out be- 
ginning with clock cycle 9. At that time the RAM 
write address counter 604 has Incremented to 8 
while the read address counter 606 has been reset 
back to zero. Therefore, the bit at address zero is 
read out from the FIAM 608 on clock cycle 9 as Is 
indicated in the "output" column. In a similar man- 
ner, bit 1 is read out on clock cycle 10, bit 2 on 
clock 11, and so on. Viewing down the "output" 
column then it can be seen that bits 5, 11. 17, 23, 
29, 35. 41, 47 and 53 have all be deleted from the 
output stream. The absence of these 9 bits made 
space for the 9 synchronization bits that were 
transmitted on clock cycles 0-8, Accordingly, the 
digital information signal has been compressed to 
allow the insertion of the synchronization sequence. 
Referring now to Rgure 8, the preferred em- 
bodiment of the sequence generator 212 of Rgure 
2 is shown in block diagram form. The sequence 
generator 212 provides both the synchronization 
signal that is interleaved with the encrypted in- 
formation signal and the pseudo-random "address" 
signal to the encryption device 208. Preferably, the 
sequence generator 212 is a maximal length LFSR, 
Mathematically, the LFSR defines an Nth degree 
polynomial (where N is the length of the LFSR) 
with one coefficient for each "tap" or output bit 
utilized to form the feedback signal. Basically, the 
preferred sequence generator is comprised of a 
shift register 800, a plurality of multiplexers 801- 
806 (or suitable equivalent) and a plurality of 
modulo two adders 808-812, Each of the multiplex- 
ers are coupled to several output bits (taps) of the 
shift register, one of which is selected via a control 
bus 816 from the controller 216 of Rgure 2. Ini- 
tially, the shift register is loaded with an initializa- 
tion vector in parallel or serially, which comprises a 
predetermined N-bit digital word. The initialization 
vector may be pre-stored in the transceiver or may 
be operator selected such as via the keypad 218. 
The sequence generator operates to add (modulo 
two) the selected taps in the adders 808-812. The 
final adder 812 provides a feedback signal 814. 
which is also the output of the sequence generator 
212. By changing the selected taps via the mul- 
tiplex control bus 816. different sequences may be 
generated for use as, for example, different group 
codes. 

To be suitable for use in the present invention, 
the sequence provided must satisfy three major 
conditions. First, the polynomial must be irreduci- 
ble. That is, the polynomial must be divisible only 
by itself and one. To be irreducible, the number of 
taps used must be an even integer (6 in the pre- 
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ferred mbodlment). Also, irreducibility is^ required^ 
for the LFSR to b© maximal length, which is the 
second condition. Lastly, the polynomial must be^ 
self-orthogonal. This is of particular importance if 

5 error correction is to be used. A polynomial must 
have less than 10 taps to be self-orthogonal. In the 
preferred embodiment of the sequence generator 
212, the shift register has a length of 64 bits, thus 
providing a 64th degree polynomial. Six taps are 

70 used to create the sequence. A 64 bit maximal 
length LFSR will produce a sequence having 1 .84 x 
10^« bits. At 12 kHz, it woukJ take'48.7 x 10^ years 
for the sequence to repeat Thus, the LFSR of the 
present invention provides a pseudo-random, 

15 noise-like signal suitable for use in a secure corh- 
munication system. 

Referring now to Rgure 9, the synchronization 
detector 232 of Figure 2 is shown. The detector 
232 is comprised chiefly of a non-Inverted detector 

20 900, an inverted detector 900' and assorted logic 
which is used to determine whether the inverted or 
nor^tnverted detector has found the synchroniza- 
tion sequence. The received data bits enter via the 
connection 902 and are supplied to the inverted 

25 detector 900* via the inverter 904. and is directly 
supplied to the non-inverted detector 900. The rea- 
son for this is that the present invention does not 
employ differential encoders and must recover the 
actual logic level. Those of ordinary skill in the art 

30 will readily appreciate that phase inversions are a 
common data transmission problem and that both 
phases must be investigated to assure synchro- 
nization. 

Still referring to Rgure 9, the operation of the 

05 non-inverted detector 900 may be described. The 
synchronization signal and the data signal are re- 
ceived by a shift register 911. The shift register 
91 1 parallel loads at least a portion of the received 
data stream to a sequence generator 212'. The 

40 sequence generators 212 and 212' are preferably 
identical since the sequence must be known by 
both the transmitter and receiver to correctly de- 
code the data on the channel. Additionally, the 
same taps for the sequence must be selected via 

45 the mux control bus 81 6* if ttie detector is to locate 
the synchronization sequence. Those skilled in the 
art will appreciate that if the synchronization bits 
that define the logical state of the sequence gener- 
ator have been properly loaded into the sequence 

so generator 212', both of the sequence generators 
will be providing the exact same sequence. The 
locally generated synchronization sequence pro- 
vided by. the generator 21 2* and the received data 
stream are compared In an adder 912. Preferably, 

55 the adder 912 is a jriodulo two adder and may be 
represented as an exclusive OR gate such as an 
MC14070B manufa'ctured by Motorola. Inc., or its 
functional equivalent. If the local sequence and the 
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received sequence are identical, the t>utput of the 
adder 912 will be at a logical "zero" state. Alter- 
natively, if the local synchronization sequence and 
the data stream are dissimilar the output of the 
adder 912 will be at a logical "one" state. The 
locally generated sequence and the received se- 
quence may not be identical for several reasons, 
including, an error in the received data stream, or 
that the sequence generator 212' has not l>een 
loaded with synchronization bits from the received 
data stream. 

When the output of the adder 912 Is at the 
logical one state, an error has been detected t>e- 
tween the received data stream and the locally 
generated sequence. This output is coupled to an 
error counter 914, which counts the number of 
times that the bcal sequence and the received 
sequence do not match. Contemporaneously, ai 
second counter 916 is counting clock cycles to 
form a "window" counter as is known in the art. If 
the error counter 914 reaches its predetermined 
count limit, it will generate an output pulse on its 
output line 918. Output line 918 Is operably coup- 
led to the parallel load port 919 or the sequence 
generator 212' through an AND gate 938, The other 
input of the AND gate 938 is connected to an 
inverter 936. which is coupled to the synchroniza- 
tion detect output 924 of the flip-flop 922. If the 
output 924 of the fitp-fiop 922 is at a logical zero 
state, synchronization has not been detected. 
These connections operate to control when the 
sequence generator 21 2* is reloaded with more 
received data bits from the shift register 91 1 . Pref- 
erably, the flip-flop 922 is an MCI 401 3B, manufac- 
tured by Motorola, Inc.. or its functional equivalent. 
Lastly, the signal 918 is coupled to an OR gate 
926, whrch in turn is a reset port 928 on the error 
counter 914 and a reset port 930 on the window 
counter 916. These connections operate to reset 
the counters to a logical zero state so that the 
detection process may begin again. 

Assuming now that the window counter 916 
reaches its predetermined count threshold prior to 
the error counter 914 asserting its output signal 
918. the synchronization detect signal 924 will be 
asserted when the window counter 916 asserts its 
output control line 932. The control line 932 Is 
coupled to the "set" port 934 of the flip-flop 922, 
which operates to raise the Q output port 924 to a 
logical one level, thereby asserting the synchro- 
nization detect signal, which is coupled to polarity 
detection logic to be hereinafter fully described. 
The asserted synchronization detect signal inhibits 
any further parallel loads of the sequence gener- 
ator 212' by placing a logical zero on the AND gate 



938 via the inverter 936. The control signal 932 is 
also coupled to the OR gate 926, which resets the 
error counter 114 and the window counter 916 via 
reset ports 928 and 930 respectively. 

6 Once the sequence generators 212 and 212* 

are "in sync", some means must be provided to 
detect sync loss and to return to the detection 
mode to attempt to recover synchronization. In the 
preferred embodiment of the present invention, a 

70 synchronizatiori loss signal 942 is provided by a 
synchronization loss counter 940. Operationally, the 
synchronization loss counter 940 counts clock 
pulses and asserts Its output signal 942 when it 
reaches a predetemnined threshold. Normally, the 

75 synchronization loss counter synchronization 940 is 
reset by the window counter via signal 932. This is 
accomplished by detecting the short periods of 
sequence Inserted throughout the message. How- 
ever, in the event that these synchronization se- 

20 quences are not detected, the synchronization loss 
counter 940 will reach Its predetBrmined threshold 
t^efore being reset and will assert the signal 942. 
To increase the probability of the window counter 
916 reaching its predetermined count on a valid 

25 sync sequence corrupted by noise, the error coun- 
ts 914 count limit is increased once sync has 
been detected. This prevents the sync loss counter 
940 from reaching its predetennined count and 
resetting the sync detected latch 922 under noisy 

30 signal conditions. Synchronization loss signal 942 
is coupled to the reset port 920 of the flip-flop 922. 
When asserted, the synchronization loss signal 942 
operates to reset the flip-flop 922 thereby enabling 
the error counter 914 to parallel load the sequence 

35 generator 212* via the AND gate 936. Also, a pre- 
deterrnined end-of-message signal could fc>e trans- 
mitted and detected to resume parallel loading. Of 
course, any combination of these techniques may 
t>e used in any particular implementation. 

40 The parallel loading by the present invention, 
of the sequence generator 21 2^ allows the entire 
length of the shift register 91 1 to be loaded in the 
time it takes to clock in one bit of the received data 
stream. Accordingly, if the en'or counter 914 

45 reaches its predetermined threshold in N clock 
cycles (or less), where N is the length of the shift 
register 911, the receiver will not "lose" any re- 
ceived bits while determining whether or rrat the 
receiver is synchronized. In the preferred embodi- 

50 ment of the present invention, the length of the 
shift register 911 is, at a minimum, equal to the 
length of the window counter 916. This "covers" 
any locally generated errors shifted into the se- 
quence generator shift register during the verifica- 

55 tion interval (defined by the length of the window 
counter; 48 bits in the preferred embodiment) with- 
out having to reload or "clear" all of the sequence 
generator. Therefore, the minimum length of the 
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transmitted synchronization sequence is equal to 
the length of the sequence generator 212* and the 
window counter 916. In the preferred embodiment 
256 bits are transmitted, which is approximately 
twice the minimum length. This allows for multiple s 
synchronization attempts, per any given time pe- 
riod, than that of the prior art As previously men- 
tioned, the preferred sequence appears random or 
pseudo-random and will quickly diverge to a 
noiseiike signal if the receiver Is not synchronized. io 
Typically, the error signal 918 may be asserted (on 
the average) in 2X bits, where X is the error thresh- 
old (X = 4 in the preferred embodiment and one 
bit equals one error). Thus, the parallel loading of 
the present invention affords both a time savings 75 
and improved performance over synchronization 
detectors of the prior art since the sequence gener- 
ator 212' need not l^e completely reloaded with bits 
from the incoming data stream after each synchro- 
nization attempt 20 

The inverted detector 900' operates in the 
same manner described above on the inverted 
information supplied by the inverter 904. The non- 
inverted detect signal 924 and the inverted detect 
signal 924' are ORed together (OR gate 944) to 25 
provide a signai detection signal 946. This signal 
(946) is re-clocked in the flip-flop 948, which pro- 
vides a trigger signal 950 to the polarity latch 952. 
The data (D) input 954 of the latch 952 is coupled 
to the non-inverted detect signal 924. Operationally. 30 
when either detector asserts its detect signai the 
trigger signal 950 is asserted on the next clocic 
cycle. The logical state of the non-inverted signal 
924 is investigated by the latch 952 by latching tfie 
state of the non-inverted signal to the Q output of 35 
the latch 952. Thus, it a trigger signal is generated 
and the logical state of the non-inverted signal is 
zero, the inverted detector 900' must have found 
tiie synchronization sequence. Conversely, if the 
logical state of the non-inverted signal is one. the 40 
detector 900 must have found the synchronization 
sequence. The polarity signal 956 Is coupled to a 
multiplex device 958 which selects either the in- 
verted or non-inverted data signai for furtiier pro- 
cessing and reception. Lastly, the loss of sync 4S 
signals 942 and 942' are ORed together in the OR 
gate 960. which resets the polarity latch 952. 
Those skilled in the art will understand that there 
are many other combinations of logic elements that 
may be used to determine the polarity of the so 
received signal and any of such circuits are suit- 
able for use in the present invention. 

To allow detection of the frame information for 
the expander. Figure 9 also includes frame detec- 
tor 962. In the preferred embodiment, this detector 55 
operates to recover both the 250 bit initial frame 
mark and subsequent 1 1 bit frame marks using any 
of the methods known to one skilled in the art. 



Since in the preferred embodiment, the frame 
marks are exclusively ORed with the synchroniza- 
tion sequence, this sequence, with the proper pa- 
larity selected, must be removed. This is accom- 
plished by selecting signal 902 or its inverse in the 
multiplexer 964 by the polarity detect signai 956. 
and removing the polarity selected synchronization 
sequence* with exclusive OR gate 966. The output 
of 966 is applied to the frame detector 862. 

Referring not to Rgure 10, the prefenred em- 
bodiment of the expander 234 of Rgure 2 is 
shown. As is readily apparent the expander 234 is 
substantially similar to the compressor 210, which 
simplifies designs and may allow the compressor 
and expander to share common circuitry. Of 
course, for full duplex operation, a transceiver 200 
would require one each of the compressor 210 and 
the expander 234. 

To describe the operation of the expander 234. 
it is assumed that the first S bits of the transmitted 
digital signal (sync data) have been received and 
removed from the information bits, such as by 
discarding them, thereby providing information bits 
synchronized to the clock 1012. This is done using 
the frame mark detected as shown in Rgure 9 and 
described above. The information (ciph r text) is 
written Into the RAM 1008 on a first-in-first-out 
t>asis using the address provided by the write 
counter 1004 and the information is read out of the 
RAM 1008 using the addresses provided by the 
read counter 1006. The infonnation bits are read 
out N-1 bits at a time and the Nth bit is added by 
the predictor 1014. 

As described in conjunction with the compres- 
sor, for N consecutive clock cycles the read and 
write addresses are the same. In the expander, it is 
important that the RAM is first written to before 
t>eing read. Accordingly, the present invention in- 
crements the counters 1002, 1004 and 1006 on the 
rising edge of the clock, and the switch 1020 
selects the write counter with the memory in the 
write mode when the clock in logical one. Of 
course, other combinations are possible to achieve 
the same result. 

The predictor 1014 is comprised of a shift 
register 1026 and a switch 1028 and is best de- 
scribed as a digital predictor, which reinserts the 
removed Nth bit at the transmitter. Those skilled in 
the art will appreciate that merely inserting a ran- 
dom bit would result in a 50% probability of error. 
Therefore it is desirable to employ a predictor to 
improve the probability of making a correct "de- 
cision. This is particulariy advantageous for digitiz- 
ed voice information which has been encoded us- 
ing a Continuously Variable Slope Delta-Modulator 
(CVSD). CVSD coded voice has a desirable prop- 
erty of having a likelihood of consecutive logical 
ones and logical zeros. Therefore, a very simple 
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predictor can be implemented wherein every Nth 
bit, the second predecessor (in time) is inserted. Of 
course, other predictors may be used (for example 
using the 3rd or 4th preceding bits, or combination 
of bits with a ROM look-up table), without departing s 
from the teachings of the predictor 1014 of the 
present invention. 

In operation, the predictor 1014 accepts the 
information from the RAM 1008 via an output port 
1024. Ordinarily, the bit just received at the shift io 
register 1026 is routed (via the switch 1028) to the 
decryptor 238. However, when the interleave coun- 
ter 1002 asserts an output pulse (every Nth dock) 
the switch 1028 routes the second predecessor in 
time (i-e.. the bit that was outputted two bits pre- 75 
vious). This simple predictor increases the prob- 
ability of a correct decision to 75%, which provides 
a suitable intelligibility rate for digitized voice. 

Refening now to Rgure 11. an illustration of 
the expander 2345 of Rgure 2 for the simple case 20 
of S = 9 and N = 6 is shown. As in Rgure 7, the 
RAM 1008 addresses are. listed from left to right 
across the top and the dock cycles 1012 are listed 
sequentially from zero through 55. The 9 synchro- 
nization bits are presumed to have been discarded 25 
and that the incoming digital waveform is now 
synchronized to the clock 1012. At a dock cycle 
zero, the Oth received bit is written into the RAM 
1008 on the rising clock edge and is read out on 
the next falling clock edge. This continues for bits 30 
1 through 4 unit the 5th received bit is encoun- 
tered. At clock cycle 5, a bit is inserted into the 
output stream by the predictor circuit 1014 (see 
Rgure 10). This predicted bit replaces the first 
deleted bit at the expander as shown in Rgure 7. 35 
At clock cycle 6. the 5th received bit is read out as 
an output. As can be seen, received bits 6-9 are 
read out in a similar manner on clock cycles 7-10 
respectively. Therefore, another predictor bit is in- 
serted at clock cycle 11. This expansion process 40 
repeats until clock cycle 54. Following clock cycle 
54. received bits 45-53 inclusive are discarded and 
the received bit 54 is read out Bits 45-53 are 
discarded because they represent the next re- 
ceived signalling word and not compressed digital 46 
infomnation. 

Referring now to Rgure 12. the pretended em- 
bodiment of the decryptor 238 is shown. Preferably 
the decryptor 238 operates in the Counter Address- 
ing (CA) mode as does the encryptor 208. As is so 
readily apparent, the decryptor 238 and the en- 
cryptor 298 are substantially similar, and in fact, 
many transceiving devices share the circuitry to 
reduce cost and size of the transceiver. Of course, 
for a full duplex device, one each of the encryptor 55 
208 and the decryptor 238 would be required. 



Referring still to Rgure 12. the pseudo-random 
sequence is provided by the synchronization de- 
tector 232 (see Rgure 2), which is received by a 
shift register 1200. Preferably, the shift register 
1200 is 64 bits in length, although other lengths 
may be used. The shift register 1200 applies its 
entire length as an address to the encryption de- 
vice 1202, which operates to implement any known 
or proprietary algorithm. The output of the encryp- 
tion device 1202 is the key stream 1204. which is 
added (modulo two) to the dpher text provided by 
the expander 234 in the adder 1206. Those skilled 
in tiie art understand tiiat, in modulo two arithmetic, 
adding and subtracting are implemented in the 
same way. That is adding and subtracting are the 
same for modulo two aritiimetic. Operationed under- 
standing is fadlitated by recalling that the key 
stream 404 was added to the plain test in Rgure 4 
to create the dpher text Thus, if the regenerated 
key stream 1204 is subtracted from tiie dpher text, 
tfie result will be the original plain text Cieariy, the 
regenerated key stream 1204 will be identical to 
the key stream 404 if and only if the same se- 
quence is applied to the shift register 1200 (i.e., the 
receiver is in sync) to address the same encryption 
algorithm 1202. Thus, output of the adder 1206 is 
the original plain text message, which may be 
applied any suitable information presentation de- 
vice (see Rgure 2). 

Refening now to Rgure 13, a block diagram 
illustrating an espedally adapted CFB device 1300 
is shown. A CFB device 1300 in the receive mode 
is chiefly comprised of a shift register 1302, an 
encryption device 1304, and a modulo two adder 
1306. Typically, a differentiaJ decoder 1312 is com- 
monly employed to avoid having to detect and 
compensate for phase inversions of the digital 
stream at the receiver. As is readily apparent, the 
differential decoded cipher text input (CTI) signal is 
fed to tfie encryption aigcMitiim 1304. which pro- 
duces a key stream 1308. The key stream 1308 is 
added to tiie differential decoded input signal in the 
adder 1306, which provides the decrypted output 
signal (PTO). The well known problems with CFB 
devices is the error multiplication problem. Assume 
a single bit is erroneously placed in tfie shift regis- 
ter 1302. This error will be applied into the encryp- 
tion algoritiim 1304 N times, where N is tiie length 
of the shift register. Thus, the error is multiplied by 
the lengtii of tiie shift register. 

As previously mentioned, historically secure 
communication equipment providers developed 
proprietary encryption algorithms for use with their 
equipment This resulted in a proliferation of en- 
cryptors each shi Ided in secrecy to maintain the 
security of th communication system. Those of 
ordinary skill in the art will understand that both 
Figures 12 and 13, ttie actual device may be the 
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same, however, their modes of operation are en- 
tirely different. Typically, the encryption device is 
realized on a small hybrid device or incorporated 
into an integrated circuit (IC). Such implementation 
practice protects the security of the system by 5 
making it difficult to analyze the operation of the 
encryptor. However, the decryptor sealed within the 
IC or hybrid device is forever constrained to op- 
erated only a selected mode. The present invention 
contemplates that it may be inconvenient to re- io 
design decryptors to operate in the preferred CA 
mode of operation. Additionally, the present Inven- 
tion seeks to avoid a further proliferation of new 
decryptors for use in the secure communication 
system 100 of the present invention. Thus, the is 
present invent'on contempiates especially adapting 
CFB devices for use with the present secure com- 
munication system. 

Still referring to Rgure 13, the LPSR sequence 
from the synchronization detector 232 is operated 20 
upon by a differential encoder 1310. The purpose 
of th& differential encoder 1310 is to counter the 
effect of the differential decoder 1312. The overall 
result is that differential decoder 1312 is effectively 
removed from the CFB device 1300 and reduces 25 
the differential encoder and decoder (1310 and 
1312) to mere delay elements. Of course, if a 
particular CFB device did not employ a differential 
decoder 1312. the differential encoder 1310 would 
not be required. The delayed sequence Is provided 30 
to the shift register 1302. The sequence is applied 
in parallel to the encryption algorithm, which effec- 
tively "addresses" the device as seen in Rgure 12. 
However, the key stream 1308 is added to the 
sequence in the adder 1306 and not the cipher text 35 
message as required. Accordingly, the present in- 
vention subtracts out the appropriately delayed 
(delay 1314) sequence (to compensate for the dif- 
ferential decoder and encoder delay) from the key 
stream in the subtracter 1316. Thus, the key 40 
stream 1308' is added to the cipher text signal in 
the adder 1318, which provides the plain text out- 
put as seen in Rgure 2. In this way, an existing 
CFB device 1300 is operated In \he receive mode 
may be adapted for use in the secure communica- 45 
tion system of the present invention. 

In summary, a synchronous secure commu- 
nfcation system is provided by the present inven- 
tion wherein an information signal is encrypted in 
an encryption device operating in the counter ad- so 
dressing mode. The encrypted signal is com- 
pressed to allow the insertion of a synchronisiation 
signal and the combined signals are transmitted. At 
the receiver, the synchronization sequence is ex- 
tracted and operated upon to provide an identical 55 
local sequence, which is used to decrypt the in- 
formation signal. The counter addressing mode 
synchronous communication system solves the 



range reduction problem experienced by present* 
dpher feedback systems, and further, provides a 
means to especially adapt cipher feedback devices 
for use in the present inventive secure communica-- 
tion system so that they may enjoy the benefit of 
range extension. To implement the teachings of the 
present invention, it may be especially convenient 
to incorporate several of the elements of Rgure 2 
into a custom IC. In the preferred embodiment of 
the transceiver 200. the encryptor 208, tiie com- 
pressor 210, tile sequence generator 212, the error 
conrector 230 (if used), the sync detector 232, tiie 
expander 234 and the decryptor 238 are all incor- 
porated In a single IC. Of course, other arrange- 
ments are possible. 

While a particular embodiment of the invention 
has been described and shown, it should be under- 
stood that the invention is not limited thereto since 
many modifications may be made. It is therefore 
contemplated to cover by the present application 
any and all such modifications tiiat may fall within 
the true spirit and scope of the basic underiying 
principles disclosed and claimed herein. 

What is claimed is: 



Claims 

1 . In a secure communication system, a meth- 
od for communicating an information signal from a 
ti-ansmitter to at least one receiver, characterized 
by the steps of: 

at the transmitter 

(a) encrypting the information signal to provide an 
encrypted signal; 

(b) tim^ compresang said encrypted signal to pro- 
vide a compressed signal; 

(c) inserting a pseudo-random synchronization sig- 
nal into said compressed signal to provide a com- 
bined signal; 

(d) transmitting said combined signal to at least 
one receiver; 

at the receivers: 

(a) receiving the transmitted signal to provide a 
received signal; 

(b) operating on said rec«ved signal to provide a 
synchronization signal; 

(c) expanding said received signal to provide an 
expanded signal; 

(d) decrypting said expanded signal to provide a 
decrypted signal comprising the information signal. 

2. In a secure communication system, a meth- 
od for communicating an voice signal from a trans- 
mitter to at least one receiver, characterised by the 
steps of: 

at the transmitter: 

(a) digitizing the voice signal to provide a digitized 
signal: 
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(b) encrypting said digitized signal to provide an 
encrypted signal; 

(c) time compressing said encrypted signal to pro- 
vide a compressed signal; 

(d) Inserting a pseudo-random synchronization sig- 
nal into said compressed signal to provide a com- 
bined signal; 

(e) transmitting said combined signal to at least 
one receiver; 

at the receivers: 

(a) receiving the transmitted signal to a received 
signal; 

(b) operating on said received signal to provide a 
synchronization signal; 

(c) expanding said received signal to provide an 
expanded signal; 

(d) decrypting said expanded signal to provide a 
decrypted signal; 

(e) converting said decrypted signal into an analog 
signal comprising the voice signal. 

3. The method of claims 1 or 2, which includes 
the transmitter steps of. 

(a) generating at least one pseudo-random 
synchronization signal; 

(b) selecting one pseudo-random synchro- 
nization signal to be inserted into said compressed 
signal. 

4. The method of claims 1 or 2. wherein the 
transmitter steps of encrypting and compressing 
are reversed. 

5. The method of claim 4. wherein the receiver 
steps expanding and decrypting are reversed. 

6. The method of claims 1 or 2, which includes 
the receiver step of detecting an end-of-message 
signal and squelching the receiver in response 
thereto. 

7. The method of claims 1 of 2, wherein said 
time compressing step comprises the steps of: 

(a) discarding every Nth bit of the informa- 
tion signal; 

(b) time compressing the remaining informa- 
tion bits to provide said compressed information 
signal. 

8. The method of claims 1 or 2, wherein said 
inserting step comprises interleaving, periodically, 
said pseudo-random synchronization signal with 
said compressed signal at a predetermined inter- 
leaving rate. 

9. The method of claims 1 or 2. wherein said 
transmitting step comprises the steps of: 
transmitting: 

(a) a preamble; 

(b) at least a portion of said pseudo-random syn- 
chronization signal; 

(c) at least a portion of said information signal; 
repeating the transmission of (b) and (c) until all of 
the information signal is transmitted. 



to. The method of daims 1 or 2, wherein said 
receiver step (b) comprises the steps of: 

(a) loading, in parallel, at least a portion of 
said received signal into a sequence generating 

5 means 

(b) generating a local pseudo-random syn- 
chronization sequence; 

(c) comparing said local pseudo-random 
synchronization sequence to said received signal to 

70 provide an error count 

(d) providing a pseudo-random synchroniza- 
tion signal if said error count is below a predeter- 
mined threshold; 

(e) repeating steps (a) through (d) if said 
IS error count is above a predetermined threshold. 

11. The method of claim 10, which includes the 
steps of: 

(a) inverting said received signal to provide 
an inverted signal; 

20 (b) loading, in parallel, at least a portion of 

said inverted signed into a sequence generating 
means 

(b) generating a local pseudo-random syn- 
chronization sequence; 

25 (c) comparing said local pseudo-random 

synchroni23tion sequence to said inverted signal to 
provide an error count; 

(d) providing a pseudo-random synchroniza- 
tion signal if said error count is below a predeter- 

30 mined threshold; 

(e) repeating steps (a) through (d) if said 
error count is above a predetermined threshold. 

12. The metiiod of claims 1 or 2, wherein said 
expanding step comprising the steps of; 

35 (a) receiving tiie compressed information 

signal to provide a received signal; 

(b) predicting every Nth bit from said re- 
ceived signal; 

(c) interieaving said received signal with said 
40 predicted bit to provide a recovered signal. 

13. The method of claim 12, wherein the step 
of predicting comprises the steps of : 

(a) storing said received signal in a storage 
means to provide a stored signal; 
45 (b) retrieving said stored signal from said 

storage means; 

(c) selecting, at every Nth bit of said stored 
signal at least one predicted bit derived from said 
stored signal. 

50 (c) comparing said local pseudo-random 

synchronization sequence to said inverted signal to 
provide an error count; 

(d) providing a pseudo-random synchroniza- 
tion signal if said error count is below a predeter- 

55 mined threshcJld; 

(e) repeating steps (a) through (d) if said 
error count is above a predetermined threshold; 
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14. In a secure communication syst m, a 
method for communicating an voice signal from a 
transmitter to at least one receiver, characterized 
by the steps of; 
at the transmitter 

(a) digitizing the voice signal to provide a digitized 
signal; 

(b) encrypting said digitized signal to provide an 
encrypted signal; 

(c) discarding every Nth bit of said encrypted sig- 
nal; 

(d) time compressing the remaining encrypted sig- 
nal to provide a compressed signal; 

(e) generating at least one pseudo-random syn- 
chronization signal; 

(f) selecting one pseudo-random synchronization 
signal to be inserted in said compressed signal; 

(g) inserting a pseudo-random synchronization sig- 
nal into said compressed signal ta provide a com- 
bined signal; 

(h}. transmitting said combined signal to at least 
one receiver, 
at the receivers: 

(a) receiving the transmitted signal to provide a 
received signal; 

(b) inverting s^d received signal to provide an 
inverted signal; 

(c) loading, in parallel, at least a portion of said 
received signal into a first sequence generating 
means; 

(d) generating a first local pseudo-random synchro- 
nization sequence; 

(e) comparing said local pseudo-random synchro- 
nization sequence and said received signal to pro- 
vide an error count; 

(f) providing a first pseudo-random synchronization 
signal in said error count is below a predetermined 
threshold else repeating from step (c); 

(g) loading, in parallel, at least a portion of said 
inverted signal into a second sequence generating 
means; 

(h) generating a second local pseudo-random syn- 
chronization sequence; 

(i) comparing said second local pseudo-random 
synchronization sequence and said inverted signal 
to provide an error count; 

(j) providing a second pseudo-random synchroniza- 
tion signal if said error count is below a predeter- 
mined threshold else repeating from step (c); 
(k) providing either said received signal or said 
inverted signal to a predictor in response to said 
first and second pseudo-random synchronization 
signals; 

(I) predicting every Nth bit of said receiv d signal 
or said inverted signal in response to step (I); 
(m) interleaving said predicted bits with their re^ 
spective signals to provide an expanded signal; 
(n) decrypting said expanded signal to provide a 



decrypted signal; 

(o) conv rttng said decrypted signal into an analog 
signal comprising the vcMce signal; 

15. In a secure communication system, a 
5 method of time compressing a digital information 

signal to insert a data signal, the improv ment 
characterized by the steps of: 

(a) discarding at least every Nth bit of the 
information signal; 

70 (b) compressing the remaining information 

bits to provide a compressed information signal; 

(c) inserting a predetermined number (S) 
data bits into said compressed information signal. 

16. The method of claim 15. which includes the 
75 step of encrypting the digital information signal 

prior to step (a), 

17. The method of claim 15, which includes the 
step of encrypting the digital information signal 
prior to step (c). 

20 18. In a secure communication system, a 

method of expanding a compressed digital informa- 
tion signal having every Nth bit removed to provide 
a recovered signal, the improvement characterized 
by the steps of: 

25 (a) receiving tiie compressed information 

signal to provide a received signal; 

(b) predicting every Nth bit from said re- 
ceived signal; 

(c) interleaving said received signal with said 
30 predicted bits to provide a recovered signal. 

19. The method of claim 18, wherein the step 
of predicting comprises the steps of : 

(a) storing said received signal in a storage 
means to provide a stored signal; 

35 (b) retrieving said stored signal from said 

storage means; 

(c) selecting, at every Nth bit of said stored 
signal at least one precficted bit derived from said 
stored signal. 

40 20. The method of claim 18. which includes the 

step of decrypting the digital information signal 
prior to step (b). 

21. The method of claim 18. which includes the 
step of decrypting the digital information signal 

45 after step (c). 

22. In a secure communication syst m. a 
method for detecting a synchronization sequence 
in a received data stream, the improvement char- 
acterized by the steps of: 

50 (a) loading, in parallel, at least a portion of 

the data stream into a sequence generating mecins; 

(b) generating a local pseudo-random syn- 
chronization sequence; 

(c) comparing said local pseudo-random 
55 synchronization sequence to the data stream to 

provide an rror count; 
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(d) providing a pseudo-random synchroniza- 
tion signal if said error count is below a predeter- 
mined threshold; 

(e) repeating steps (a) through (d) if said 
error count is above a predetermined threshold. s 
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